Denial of Service Vulnerability in IrfanView with TOOLS Plugin
CVE-2017-9916

7.8HIGH

Key Information:

Vendor

Irfanview
Status
Tools
Vendor
CVE Published:
5 July 2017

What is CVE-2017-9916?

The IrfanView application, specifically version 4.44 (32bit) accompanied by the TOOLS Plugin version 4.50, is susceptible to a denial of service attack. This vulnerability arises when the application processes crafted files that can manipulate data from a faulting address, potentially leading to application crash or unexpected behavior. This can expose users to further risks if exploited by malicious entities. Users are advised to avoid handling untrusted files and to update to a secure version of the software.

References

https://github.com/wlinzi/security_advisories/tree/master...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.